Privacy notice

Data controller and contact

Tamra Phra (ตำราพระ) is run by the site owner, who is the controller of personal data under this notice.

For questions about personal data, or to use your rights, write to [email protected].

What we collect

A visitor who is not signed in gives us nothing to browse the site. We only keep your cookie choice with your browser name (see Cookies) and the words typed into the search box, in aggregate and not tied to a person.

• Members: email, display name, an optional avatar, your language, and a password stored only as an irreversible hash (if you set one).
• Signing in with Google or LINE: we keep the user id and the email the provider sends, so we can recognise you next time.
• What a member creates: favourites, comments, and the history of image searches (the pieces found and their similarity scores). A photo you upload to search is private: it is shown to no one, not used to train anything and not added to the archive.

We use this data only to make accounts and member features work. We do not sell it or hand it on. Usage analytics on this site do not use cookies.

Cookies

Necessary cookies (set without asking, because the site cannot work without them):

• tp_session: remembers that you are signed in. Set only when you sign in, sent only to the server (scripts cannot read it), and it expires or is removed when you sign out.
• tp_oauth: set briefly (at most 10 minutes) while you sign in with Google or LINE, to prevent forged requests, then removed.
• tp_anon: a random id that ties together the cookie choices made in one browser. It says nothing about who you are.
• tp_consent: remembers your cookie choice for 180 days. You can change it at any time from the "Cookie settings" link at the foot of the page.

Optional cookies: third-party advertising cookies (Google AdSense) are set only on article pages, and only after you accept.

IP addresses

• When you sign in we store your IP address and browser name (user agent) with that session, to keep your account safe.
• When you post a comment we store your IP address with it, to deal with abuse. It is never shown publicly and is cleared when you delete your account.
• The cookie-choice record does not store an IP address. Rate limiting uses IP addresses only briefly and does not tie them to an account.

How long we keep it

• Photos uploaded to search, with their results: kept 90 days and then deleted automatically, or deleted when you delete the history or your account.
• Words typed into the search box (no user data, no IP): kept as aggregate counts for 365 days, then deleted.
• Sign-in sessions: expire on their own, and are removed when you sign out, change your password or delete your account.
• Account, favourites and comments: kept until you delete them.
• The record of your cookie choices (no IP) is kept as evidence of what you chose and when.

Your rights and how to use them

• See and get a copy of your data: press "Download my data" on the account page. You receive a JSON file with your profile, favourites, comments, search history, cookie choices and requests. It does not include the password hash, tokens or IP addresses.
• Correct your data: change your display name, language, avatar and password yourself on the account page.
• Delete your data: press "Delete my account" on the account page. The profile, favourites, image-search history and sign-in methods are removed at once, comments are marked deleted, and stored IP addresses are cleared. It cannot be undone.
• Withdraw consent: change your cookie choice at any time from the "Cookie settings" link at the foot of the page.
• To use a right by email (for example to ask for deletion without signing in, or any other question): write to [email protected]. We check that you own the account and then act on it.

Changes to this notice

When this notice changes we update the date of the version shown above, and ask for your cookie choice again if the relevant text changed.